OpenSSL 4.0 removed support for SSLv2 ClientHello, so the canned SSLv2
ClientHello test no longer gets the expected alert:
not ok 38 - Client: Alert from canned SSLv2 ClientHello
FAIL: t/local/48_client_hello_callback
Backport the upstream test update for it.
meta-perl-image-ptest-libnet-ssleay-perl on qemux86-64 now passes
37 tests with none failing.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Data::HexDump uses parent.pm, which was not installed, so the module
failed to load and both ptests failed:
Can't locate parent.pm in @INC
meta-perl-image-ptest-libdata-hexdump-perl on qemux86-64 now passes.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Build.PL writes MYMETA.json through CPAN::Meta, which opens it with an
:encoding() layer. Without PerlIO::encoding installed this fails:
Unknown PerlIO layer "encoding" at .../CPAN/Meta.pm line 412.
Error opening 'MYMETA.json' for writing: No such file or directory
and t/simple fails.
meta-perl-image-ptest-libmodule-build-tiny-perl on qemux86-64 now passes.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Authen::SASL::Perl::DIGEST_MD5 uses Crypt::URandom, which was not
installed, so the DIGEST-MD5 mechanism could not be loaded:
No SASL mechanism found: DIGEST-MD5
and five ptests failed (digest_md5, negotiations/digest_md5,
server/digest_md5, digest_md5_verified and order).
meta-perl-image-ptest-libauthen-sasl-perl on qemux86-64 now passes
15 tests with none failing.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Crypt::OpenSSL::RSA 0.41 does "use Crypt::OpenSSL::Bignum", which was
not installed, so the module failed to load and every ptest failed:
Can't locate Crypt/OpenSSL/Bignum.pm in @INC
BEGIN failed--compilation aborted at .../Crypt/OpenSSL/RSA.pm line 7.
Add libcrypt-openssl-bignum-perl to RDEPENDS, and perl-module-mime-base64
for t/der.t.
meta-perl-image-ptest-libcrypt-openssl-rsa-perl on qemux86-64 now passes
16 tests with none failing (7 skipped).
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Crypt::URandom provides non-blocking cryptographically secure random
bytes via getrandom(2) or /dev/urandom. Authen::SASL 2.2000 uses it in
its DIGEST-MD5 mechanism.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Crypt::OpenSSL::Bignum provides access to OpenSSL's multiprecision
integer arithmetic. Crypt::OpenSSL::RSA 0.41 loads it unconditionally
("use Crypt::OpenSSL::Bignum" in RSA.pm), so RSA cannot be used at all
without it.
The module has no t/ directory (only a top-level test.pl), so no ptest.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Data-HexDump 0.02 installed a "hexdump" script via EXE_FILES in
Makefile.PL, so registering ${bindir}/hexdump with update-alternatives
was correct. Upstream 0.02_01 moved that script to eg/ and dropped
EXE_FILES:
* Moved hexdump script to eg/, so it won't be installed.
Addresses RT#123224 from KENTNL.
so since the 0.02 -> 0.04 upgrade the package installs nothing but
Data/HexDump.pm and the alternative refers to a file that is never
created:
WARNING: libdata-hexdump-perl-0.04-r0 do_package: libdata-hexdump-perl:
alternative target (/usr/bin/hexdump or /usr/bin/hexdump.libdata-hexdump-perl)
does not exist, skipping...
WARNING: libdata-hexdump-perl-0.04-r0 do_package: libdata-hexdump-perl:
NOT adding alternative provide /usr/bin/hexdump:
/usr/bin/hexdump.libdata-hexdump-perl does not exist
WARNING: libdata-hexdump-perl-0.04-r0 do_package: libdata-hexdump-perl:
alt_link == alt_target: /usr/bin/hexdump == /usr/bin/hexdump
Drop the update-alternatives inherit and its settings to match what the
recipe actually ships. The eg/hexdump example is deliberately not
installed upstream, and util-linux/busybox already provide hexdump.
Packaged file lists are unchanged; the package no longer carries the
dead update-alternatives postinst/prerm.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
oe-core 3c2bb7bce1 ("cpan_build: disable .packlist and html doc") moved
--create_packlist=0 into cpan_build.bbclass and disabled html doc
generation there as well. Neither .packlist nor the html docs are
generated anymore, so the do_install:append() hooks that sed'ed TMPDIR out
of them now run find(1) over paths that no longer exist and hand sed an
empty argument list:
find: '.../image/usr/share/doc/perl/html/site/lib/HTML/': No such file or directory
sed: no input files
WARNING: exit code 4 from a shell command.
Remove the now dead hooks.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- Documentation issue for Net::DNS::RR::RRSIG::verify()
- Denial of Service via long DNS compression chains
- Remote code injection via EDNS EXTENDED ERROR
- UNIX.pm: Unreachable code warning using Apache/mod_perl
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update:
Updated contact address to website URL
Updated distribution notice to <https://www.gnu.org/licenses/>
Changed example signature: Updated the example signatory from Ty Coon to Moe Ghoul
Changelog:
- Avoid undefinedness warning in config_defined
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* Fix typo in Makefile.PL
* Compress::Raw::Zlib version 2.222 required--this is only version 2.221
Update to version 2.223
* Tag `:constants` no longer exports all constants Fixes#78, #64
* Bump actions/checkout from 6 to 7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Close socket by default on failed SSL handshake when created with new, but
keep open when upgrading from existing socket with start_SSL. This restores
old behavior which was accidentally broken.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: bundled GPL/Artistic license text reflowed; FSF postal address replaced with a URL (Perl licensing unchanged)
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: bundled GPL/Artistic license text reflowed; FSF postal address replaced with a URL (Perl licensing unchanged)
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The Makefile now creates /run/lock/logcheck (was /var/lock/logcheck);
update the sed that comments out that install line so nothing is left
installed-but-not-shipped.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
XML::LibXML 2.0200+ switched its build system to use Alien::Libxml2
(via Alien::Base::Wrapper) to locate libxml2. That module is not
packaged in OpenEmbedded and pulls in the whole Alien::Build stack,
which is why the recipe was previously skipped.
Add a patch that bypasses Alien and queries the target libxml2 through
pkg-config, which is already wired up to the recipe sysroot, and:
- inherit pkgconfig and drop the now-unneeded EXTRA_CPANFLAGS.
- drop the obsolete pre-Alien patches (the libxml2/clang compat fixes
are upstreamed in this release and no longer apply).
- remove SKIP_RECIPE so the recipe builds again.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: license note moved from README to README.md and expanded to a full copyright / same-terms-as-Perl stanza
fix URI and license for 9999.32
The 9999.32 release is published by new CPAN maintainer (CAPOEIRAB)
and renamed the license file to README.md
- Point SRC_URI at the CAPOEIRAB author directory (sha256 unchanged).
- Update LIC_FILES_CHKSUM to the COPYRIGHT & LICENSE section of README.md.
- Refresh the stale HOMEPAGE to the dist page.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
Strip leading zeros from port numbers in canonical URIs
License-Update:
Change address to website
Change signature from Ty Coon to Moe Ghoul
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Maintainership moved on CPAN from OVID to NEILB, so update the
SRC_URI author path and HOMEPAGE accordingly. Refresh
LIC_FILES_CHKSUM for the updated FSF address in the bundled GPL
text; the licensing (Artistic-1.0 | GPL-2.0-or-later) is unchanged.
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- split role initialization from setting pragmas to allow more flexibility
for subclasses
- ensure consistent internal handling of Class::C3 vs mro
- reduced Exporter dependency to 0 (any version)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
* remove use of eval in globmapper. #73
* Update zipdetails to version 4.006.
* Fix typo in fastForward #72
* Fix issue with "rawdeflate` option in AnyInflate.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Supports additional indicators on block scalars in YAML
- fix string comparisons with $] to use numeric comparison instead
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Another fix to issue #175 to make sure that an unblessed sockets gets
blessed in place instead of using new_from_fd. Document that it will
not retain original class with unblessed sockets on error, since this
never worked anyway (there is no native unbless)
2.097 2026/01/06
- fix issue #175 with upgrading from plain socket (no object) by using
correct fdopen mode +< instead of <+
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
[Added]
- Documentation for the security layer
[Fixed]
- CVE-2025-40918 (Insecure source of randomness),
required addition of dependency on Crypt::URandom
- Several public functions missing from the API documentation
[Changed]
- Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5
and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective
RFC documents; thanks to @robrwo for the suggestion and @neustradamus
for the pointers to the documentation
- Update module metadata to point to the new 'perl-authen-sasl' org
on GitHub to which the modules moved
- Use VERSION declarations in 'package' statements, since our minimum
Perl version is 5.14 anyway
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update:
zlib updated to 1.3.2
Copyright year updated to 2026
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Khem Raj
Jaipaul Cheernam
Trevor Gamblin
Wang Mingyu
Jason Schonberg
Liu Yiding
Khem Raj
Gyorgy Sarvari